A Russian state-backed hacking group known as Secret Blizzard or Turla has been aiming adversary-in-the-middle (AiTM) attacks at foreign embassies in Moscow, Microsoft researchers said.